XR
Product
xrdp
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 11Medium 9Low 0
Watch
Add xrdp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44178 | 8.8 | Jul 20 | xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow Affected: < 0.10.6.1 |
| CVE-2026-35512 | 8.8 | Apr 17 | xrdp: Heap buffer overflow in EGFX channel Affected: < 0.10.6 |
| CVE-2026-32107 | 8.8 | Apr 17 | xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails Affected: < 0.10.6 |
| CVE-2017-16927 | 8.4 | Nov 23 | The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to… Affected: through 0.9.4 |
| CVE-2026-32623 | 8.1 | Apr 17 | xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly Affected: < 0.10.6 |
| CVE-2022-23613 | 7.8 | Feb 7 | xrdp is an open source remote desktop protocol (RDP) server Affected: 0.9.17; 0.9.18 |
| CVE-2020-4044 | 7.8 | Jun 30 | The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload Affected: before 0.9.13.1 |
| CVE-2026-32105 | 7.7 | Apr 17 | xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode Affected: < 0.10.6 |
| CVE-2026-54538 | 7.5 | Jul 20 | xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER Affected: < 0.10.6.1 |
| CVE-2026-55626 | 7.3 | Jul 20 | xrdp: No authentication required with Xvnc backend on RHEL 9 Affected: < 0.10.6.1 |
| CVE-2017-6967 | 7.3 | Mar 17 | xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of… Affected: 0.9.1 |
Showing 11